CVEvulnerability

CVE-2020-25724

4.3 MEDIUM Published 2021-05-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-05-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-567

Description

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

Affected configurations

• redhat resteasy (< 2.0.0) • redhat resteasy 2.0.0 • quarkus quarkus (< 1.11.2)

Related

Weakness · CWE (1)

  • CWE-567 Unsynchronized Access to Shared Data in a Multithreaded Context weakness

References